Principal Penetration Tester

Dragos, Inc.

. Provide technical leadership across vulnerability assessments, penetration testing, and adversary emulation for customer engagements .

Posted 11/6/2026full-timeRemote • United KingdomLead💰 £105,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in vulnerability assessment and penetration testing within operational technology (OT) environments, with a strong focus on developing methodologies and engaging with executive stakeholders. Proven ability to lead offensive cybersecurity campaigns and mentor cross-functional teams while delivering strategic insights and recommendations.

Highest-signal resume keywords

Vulnerability AssessmentPenetration TestingOT CybersecurityMetasploitReport Writing

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentPenetration TestingRed TeamingOT Penetration Testing MethodologiesNetwork Traffic AnalysisExploit DevelopmentAdversary EmulationThreat IntelligenceAI-Generated Output ValidationCyber Threat Analysis

Soft Skills

Strong Presentation SkillsSound JudgmentIndependent WorkCollaboration Across Teams

Tools & Technologies

MetasploitNmapKali LinuxCobalt StrikeBurp SuiteLOTL ToolsetsC2 Frameworks

Industry Keywords

Operational TechnologySCADA NetworksDCSCybersecurityAdversary TTPsControl SystemsTransmission ManagementDistribution Management

Tech Stack

Tools & technologies

Cyber SecurityFirewallsLinux

About the role

Key responsibilities & impact

Provide technical leadership across vulnerability assessments, penetration testing, and adversary emulation for customer engagements
Serve as primary technical lead and trusted advisor for complex industrial penetration testing, purple teaming, and vulnerability assessment engagements
Define OT penetration testing methodologies, assessment frameworks, and red team tactics informed by threat intelligence and adversary emulation
Design and lead offensive campaigns to uncover attack paths across IT/OT boundaries and industrial environments
Translate hands-on findings into strategic R&D priorities for proprietary tools, behavioral analytics, and detection content
Evolve internal playbooks, runbooks, and operating procedures
Engage executive stakeholders with cybersecurity guidance, risk prioritization, and remediation recommendations
Deliver presentations to C-suites, boards, and technical leadership
Represent Dragos through original research, conference presentations, whitepapers, and public engagements
Mentor engineering, threat intelligence, and consulting teams across functions

Requirements

What you’ll need

8+ years of hands-on cybersecurity experience in vulnerability assessment, penetration testing, or red teaming within the OT space
In-depth knowledge of OT penetration testing methodologies in white, gray, and black-box contexts
Deep understanding of OT-specific architectures and services, including DCS, historians, SCADA networks, transmission/distribution management, AMI, related communication protocols, and other control systems
Extensive knowledge of OT cyber threats, attack paths, exploits, and adversary TTPs
Hands-on experience with Metasploit, Nmap, Kali Linux, Cobalt Strike, Burp Suite, common LOTL toolsets, and C2 frameworks
Advanced experience with routers, switches, load balancers, and firewalls; ability to analyze network traffic and host data in a cybersecurity context
Proven experience using large language models (e.g., Claude) to support penetration testing execution and reporting, including reconnaissance, exploit development, and drafting findings
Sound judgment in validating AI-generated output and securely handling client data
Strong report-writing and presentation skills for technical and non-technical audiences
Ability to work independently in a remote environment and coordinate across distributed teams
Willingness to travel up to 30–40% domestically and internationally
Must pass a background check as a condition of employment

Benefits

Comp & perks

Competitive Equity Package
Comprehensive Benefits Plan